Oracle Database Server RAS Security Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability has been identified in the RAS Security component of Oracle Database Server. Affected versions include 19.3 through 19.26, 21.3 through 21.17, and 23.4 through 23.7. This vulnerability allows a low-privileged attacker with User Account privileges and network access via Oracle Net to compromise RAS Security. Exploitation requires human interaction from a third party. Successful attacks could lead to unauthorized creation, deletion, or modification of critical data, or all data accessible through RAS Security, as well as unauthorized access to critical data or complete access to all RAS Security accessible data.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical data or complete access to all RAS Security accessible data, as well as unauthorized creation, deletion, or modification of critical data or all RAS Security accessible data.